[airprobe-main] Cell phone tracking using ss7 hlr lookups

Harald Welte laforge at gnumonks.org
Fri Feb 26 07:23:32 UTC 2010

On Thu, Feb 25, 2010 at 08:50:54PM +0100, Karsten Nohl wrote:

> >My question is, is this MSC number, visible from the mobile phone
> >side? If yes, somebody could actually wardrive, to get the MSC
> >number-to-location mapping?
> >Can airprobe, or OpenBTS help?
> Creating the {MSC -> location} mapping database would be a very
> worthwhile exercise. The data collection would have to happen from
> phones. Either we create an application for one of the popular phone
> platforms (Symbian, Android, iPhone). Anybody on the list knows if
> these phones expose the MSC number to application software?

Sorry, the phones have no idea about this, as the current MSN number is an
attribute of the core GSM network.

You can only collect this information in the core network by means of some
form of access to the SS7 roming network (GSM MAP).

- Harald Welte <laforge at gnumonks.org>           http://laforge.gnumonks.org/
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)

More information about the baseband-devel mailing list